Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dc69068-9ae1-3ae8-8da4-cda31bf4deaa.roa
File:                     6dc69068-9ae1-3ae8-8da4-cda31bf4deaa.roa (raw, json)
Hash identifier:          +vqHOk1Vlbv3/096QUZHu7TM+kWoflDJACCnce5hY18=
Subject key identifier:   2D:86:02:83:08:A9:17:4B:95:B8:FE:81:4A:A8:40:46:1B:40:C1:90
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C58212262CD8413055894D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dc69068-9ae1-3ae8-8da4-cda31bf4deaa.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        34.122.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:12:26:2c:d8:41:30:55:89:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=d096e7d9-0b1a-45e4-9e6b-908c3dd14487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:98:0f:96:96:b0:68:10:0d:be:ad:e1:8f:52:
                    9c:30:99:0a:9e:b1:95:a1:b9:45:5a:39:38:f7:75:
                    c3:25:23:bc:c6:84:d4:a8:36:d7:ae:8a:24:11:08:
                    e5:e7:77:82:71:13:14:32:38:ef:09:c2:b0:4b:bd:
                    3b:ae:2b:3f:d5:0e:2e:fb:b7:c1:b3:27:3a:6c:e4:
                    29:ff:55:41:a0:95:dc:5a:55:57:0b:6f:8f:74:79:
                    31:eb:01:95:a0:6d:74:77:c9:51:6d:56:35:03:e3:
                    81:c2:1e:85:2a:e3:a7:97:76:7b:b3:17:2c:48:58:
                    00:8d:db:a1:5e:c2:87:d8:5a:7e:5b:e7:42:47:c7:
                    8f:b2:f7:7a:58:cd:54:9b:28:3d:6d:65:63:db:e9:
                    6c:18:c0:82:59:a1:cb:34:48:1d:de:0f:12:43:6c:
                    2b:99:24:a7:7c:1c:91:32:93:8b:12:3d:79:ce:32:
                    2c:91:02:93:69:8b:81:54:5a:74:55:2e:a7:b6:8a:
                    03:d4:a3:ad:e3:a6:29:7a:bd:44:42:21:19:e6:7a:
                    5f:78:6c:52:a9:fb:a8:6a:c3:de:d5:10:26:ca:99:
                    c6:40:b2:94:ae:ed:3c:f8:71:45:56:ce:b0:b7:08:
                    fb:af:0d:f2:3a:c6:44:70:5a:cf:8d:60:c5:f1:24:
                    1d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:86:02:83:08:A9:17:4B:95:B8:FE:81:4A:A8:40:46:1B:40:C1:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dc69068-9ae1-3ae8-8da4-cda31bf4deaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.122.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:26:9d:32:da:3d:91:90:80:2a:a0:02:39:3f:15:cb:ae:99:
         eb:76:21:54:77:61:c7:25:44:42:bf:21:44:5d:b9:ef:77:fe:
         65:5f:74:0d:eb:19:9e:50:51:e5:1b:ce:f8:90:66:11:de:b9:
         d1:98:63:7a:9d:d8:cc:05:49:11:5b:e0:30:27:13:75:c3:8d:
         4d:16:f5:22:f2:96:ce:ac:82:56:77:46:1c:b2:90:d6:47:ee:
         48:b1:6f:35:41:72:08:23:9d:dd:8d:e6:a2:69:82:3a:5c:ec:
         ec:d2:06:7b:2f:99:98:ec:a6:5b:76:de:4f:67:e8:09:8b:76:
         70:02:1c:dc:38:06:90:e2:f6:ec:98:b2:ee:05:78:54:08:c4:
         9b:be:bc:ea:b2:ff:a7:89:45:ff:f1:93:96:6f:22:df:35:4a:
         b7:9e:07:36:49:f8:a7:cb:a3:18:f9:45:65:8e:1f:48:d5:97:
         14:4e:bd:26:11:fc:b2:38:fa:97:45:d1:15:ec:d7:ae:59:8f:
         96:13:94:85:2e:17:64:51:81:2a:9a:49:6f:24:94:75:ec:5e:
         2e:31:82:2c:1e:43:64:42:87:45:a4:d2:35:ac:41:c2:2d:23:
         66:34:a2:48:70:db:ba:ec:3d:aa:d9:a3:71:58:32:ca:62:78:
         03:21:83:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:08:01 2025 by rpki-client